Cyber Security Cloud, Inc. (Headquarters: Shibuya-ku, Tokyo, President and CEO: Toshihiro Koike, hereinafter “the Company”) will cover the period from January 2021 to the end of March 2021, including the second state of emergency declaration. We will announce the cyber attack detection report. In addition, this data is the attack log observed by "WafCharm", a Cloud-based WAF that visualizes and blocks cyberattacks on websites provided by our company, AWS WAF, and "Shadankun", an Azure WAF automated operation service. are aggregated, analyzed and calculated.

■Survey overview
・ Survey period: January 1 to March 31, 2021
・Survey target: User accounts using “Shadankun” and “WafCharm”
・Investigation method: Analysis of attack logs observed by “Shadankun” and “WafCharm”

■Cyber-attack detection status from January to March 2021

Attacks per 1 sid (sid = Security Identifier: a security identifier that uniquely identifies network user accounts, groups, etc.) in January 2021 were 22,215/month, similarly in February 16,654/month, and in March We detected 20,814 attacks per month. The average number of attacks detected over the three months was 19,894, a decrease of about 20% compared to the same period of the previous year, indicating a downward trend in attacks from 2020 to 2021.

In particular, under the second state of emergency declared from January 7 to March 21, 2021, 647 attacks per day per sid were detected. This is about 30% less than when the first state of emergency was declared from April 7 to May 25, 2020.
When the first state of emergency was declared, approximately 25% more cyberattacks were detected than the average number of cyberattacks detected in 2019. There may have been a temporary surge. On the other hand, under the second state of emergency declaration, the number of employees at companies nationwide increased compared to the first time*1, and factors such as an increase in the number of employees in offices and the solidification of the business system of companies. As a result, the number of attacks is believed to have remained at a relatively low level.

■Comment from Yoji Watanabe, Representative Director, CTO
Although the number of cyber-attacks that increased due to the pandemic in 2020 is currently on the decline, since last year, the spread of telework tools has increased the risk of intrusions via VPNs, and cyber-attacks using malware such as Emotet and Ragnar Locker have become conspicuous. As a result, attack methods are becoming more sophisticated and diverse year by year. While countermeasures against such attacks are becoming an urgent task, it is expected that the digitization of domestic companies will accelerate in the future, and cyber security measures have become an even more important management issue.
On the other hand, the survey conducted by our company also highlights the lack of understanding of web security among management. Under these circumstances, it is necessary for companies that are promoting new normal work styles and digitalization to reconsider their web security systems and vulnerability management of their servers.

[About Cloud-based WAF “Shadankun”]
https://www.shadan-kun.com/

Cloud-based WAF "Shadankun" is a web security service that visualizes and blocks cyber-attacks on websites and web servers. Utilizing the attack detection AI engine "Cyneural" that uses deep learning, it not only detects general attacks, but also discovers unknown attacks and false positives at high speed. The team "Cyhorus", which is the world's leading threat intelligence, responds quickly to the latest threats. The number of companies and sites that have introduced it is ranked first*2 in Japan, and it is used regardless of the size of the company.

[About “WafCharm”]
https://www.wafcharm.com/

“WafCharm” is a service that can automatically operate a WAF provided in the public cloud, which is the No. 1 * 3 in Japan in terms of the number of installed users, using “AI” and “big data”. We provide two major platforms, AWS and Microsoft Azure.
Equipped with the AI engine “WRAO*4” (Patent No. 6375047) that automatically operates the optimal WAF rules using machine learning, the number of cumulative sites and companies that have introduced it is No. 1 in Japan. *2 The Cloud-based WAF “Shadankun”, which has a track record of 2, utilizes a cumulative total of more than 1.9 trillion big data, and automatically applies the optimal rules for each customer. The cyber threat information monitoring team "Cyhorus" responds quickly to the latest threats. In addition, we also provide support*5 from development engineers with know-how in signature customization that is one of the best in Japan.

[About Cyber Security Cloud, Inc.]
Company name: Cyber Security Cloud, Inc.
Location: VORT Ebisu maxim 3F, 3-9-19 Higashi, Shibuya-ku, Tokyo 150-0011
Representative: Toshihiro Koike, Representative Director, President and CEO
Established: August 2010
URL: https://www.cscloud.co.jp/
With the philosophy of "creating a safe and secure cyber space that people around the world can use", Cyber Security Cloud provides web application security services to the world using the world's leading cyber threat intelligence and AI technology. Offered by subscription. In addition, AWS, which has a 47.8%*6 global share of the cloud market, has been certified as the 7th AWS WAF Managed Rule Seller in the world.
As a leading company, we will continue to develop services to create a cyberspace that people around the world can use safely and securely, and contribute to the promotion of the information revolution.

*1 Source: Kaonavi “Survey on remote work”
*2 Source: Market research on “Cloud-based WAF service” (May 2019-June 2019 survey) <ESP Research Institute>
* 3 Source: Survey by Japan Marketing Research Organization Survey overview: Fiscal year ended July 2020_Actual survey
*4 Only compatible with AWS WAF classic
*5 Applicable only to some plans
*6 Source: Gartner (August 2020)･･･Worldwide Iaas Public Cloud Services Market Share, 2018-2019